Qlik

Records11All Threatist records

Exploited (KEV)3In CISA KEV

CVSS critical2CVSS 9.0–10.0

CVSS high5CVSS 7.0–8.9

Exploited now

Qlik records in CISA KEV

TI-2023-26226 Qlik Sense HTTP Tunneling Vulnerability CRITICAL 100KEV 2025-01-13 TI-2023-21870 Qlik Sense HTTP Tunneling Vulnerability CRITICAL 100KEV 2023-12-07 TI-2023-21871 Qlik Sense Path Traversal Vulnerability CRITICAL 95KEV 2023-12-07

Components

Products in the NVD configurations · select one to filter the records

Qlik Sense 7 records CRITICAL Qlikview 3 records MEDIUM Nprinting Designer 1 record LOW Qlik Analytics 1 record LOW Qlikview Server 1 record LOW

Records

3 records in Qlikview · all components

TI-2015-03064 CVE-2015-3623 · GHSA-m945-cp8g-j6x8

XML external entity (XXE) vulnerability in QlikTech Qlikview before 11.20 SR12 allows…

MEDIUM 45

XML external entity (XXE) vulnerability in QlikTech Qlikview before 11.20 SR12 allows remote attackers to conduct server-side request forgery (SSRF) attacks and read arbitrary files via crafted XML data in a request to A…

CVSS 2.0MEDIUM 6.4 Network No auth Interaction — EPSS 0.1576 Published 2015-09-16 No fix listed

TI-2021-18519 CVE-2021-41989 · GHSA-76r9-q8j4-x44w

Qlik QlikView through 12.60.20100.0 creates a Temporary File in a Directory with Insecure Permissions.

LOW 36

Qlik QlikView through 12.60.20100.0 creates a Temporary File in a Directory with Insecure Permissions.

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00297 Published 2023-01-26 No fix listed CWE-668

TI-2022-20472 CVE-2022-42248 · GHSA-fc8p-vv7c-8x52

QlikView 12.60.2 was discovered to contain a stored cross-site scripting (XSS)…

LOW 25

QlikView 12.60.2 was discovered to contain a stored cross-site scripting (XSS) vulnerability in the QvsViewClient functionality.

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00376 Published 2023-03-06 No fix listed CWE-79

Open these records in search →

Critical	2
High	5
Medium	4
Low	0
No CVSS	0